The Surveillance Is the Product
Surveillance is not a flaw in our digital tools but their purpose. The invasive design is deliberate, the safer alternatives ignored, and the choice to refuse made theoretical by an infrastructure that has made participation impossible without submission.
The Names They Chose
Try to do something simple online — sign up for a game, join a community, use a new service — and what should take thirty seconds becomes an involuntary tour of the modern surveillance apparatus. Create an account. Verify your email. Link your phone number. Download an authenticator app. Confirm your identity. Upload a photo. Grant access to your contacts, your location, your camera. Agree to terms no one reads because they were written not to be read. Each step feels small. The totality is not small. It is a complete inventory of who you are, where you are, what you look like, who you know, and what you do — handed over as the price of participation in ordinary life. The surveillance is not a side effect of these systems. It is the product.
The standard defence is that all of this exists to protect you. Two-factor authentication keeps your account safe. Age verification shields children. Mandatory updates patch vulnerabilities. Some of this is true in isolation: updates do fix exploits, and stolen accounts are a real problem. But the protection has been deliberately routed through identifying, centralising, data-retaining systems when less invasive alternatives exist. Hardware security keys work without phone numbers. Age can be verified through methods that confirm a threshold without storing an identity. Open-source software can be updated without funnelling users through a proprietary app store that records every download. The design choices are not inevitable. They are the choices that maximise data collection, dressed in the language of care.
Pokémon Go, developed by Niantic — founded by a former Google Maps employee — converted play into a crowdsourced location-mapping and movement-data system of extraordinary granularity. Millions of players voluntarily generated real-time location metadata while catching cartoon creatures. Facebook built one of the largest facial-recognition databases ever assembled, tagging faces across billions of photos before regulators forced it to shut the feature down. Clearview AI scraped billions of images from the open web to build a facial-recognition tool it sold directly to law enforcement. The game is the lure. The social network is the lure. The data is the catch.
The gap between commercial extraction and state surveillance is not a gap at all. PRISM and XKeyscore — documented NSA programmes disclosed through the Snowden files, partially acknowledged by officials, and reported in detail by journalists who risked their freedom to do so — gave intelligence agencies direct access to data held by technology companies. But the pipe runs the other direction too: US government agencies routinely purchase commercially collected location data from brokers, sidestepping the warrant requirements that would apply if they gathered it themselves. The commercial platforms harvest. The state buys or compels access. They are not separate systems. They are two halves of one apparatus.
What makes the situation perversely legible is the names the companies choose. Palantir Technologies — named after the seeing-stones through which Sauron surveilled Middle-earth and bent weaker wills to his purpose — builds software used by intelligence agencies and police departments to aggregate data on individuals who have not been charged with any crime. Anduril Industries builds autonomous surveillance towers and AI-driven weapons systems for border and battlefield deployment. Mithril Capital. Valar Ventures. Erebor, the mountain where a dragon hoarded gold. These names are not proof of conscious villainy; founders may choose them out of literary affection rather than self-aware menace. But they are illustrations of something real: men building surveillance and war infrastructure who reach instinctively for the iconography of world-ordering power. Whether they see themselves as Sauron or Aragorn changes nothing about what their systems do. Palantir's predictive policing tools have been deployed against communities without probable cause. Anduril's towers watch people who have committed no offence. A product must be judged by what it actually does, not by what its creators meant for it to do.
The structure is the indictment. Capitalism, unconstrained, commodifies everything it can capture. Personal data is the most valuable commodity of the twenty-first century, and the dominant digital platforms are not gifts to their users — they are extraction machines. Every walled garden, every forced app download, every identity-verification layer functions as a funnel, ensuring that no one participates in digital life without passing through a checkpoint that records who they are. The system is not broken. It is working exactly as designed.
What is being lost is real freedom — not formal permission, but actual capacity. A person who must submit biometric data to play a game, carry a tracking device to verify their identity, and agree to surveillance as a condition of communication is formally free to refuse. But opting out of digital life in a society that has made digital life compulsory is not a real option for most people. The freedom to refuse is theoretical. The submission is practical. The system achieves through infrastructure what no law could openly mandate: continuous, granular surveillance, accepted because the alternative is exclusion from ordinary participation in the world.
The companies named themselves after seeing-stones and dragons' hoards and then built accordingly. The names they chose are the most honest thing about them.